bazarloader | cd18e2bebc72f731a5dbe0588ab3633b0421f45fa205cbb674f231d56f4a4e5a | Triage™

Analysis

max time kernel
124s
max time network
164s
platform
windows10_x64
resource
win10-en-20210920
submitted
22/10/2021, 10:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
64a5774048b74fc220ddfd6dc411a48d.dll
Size 341KB
Sample211022-l5mdwabea2
SHA256 cd18e2bebc72f731a5dbe0588ab3633b0421f45fa205cbb674f231d56f4a4e5a
MD5 64a5774048b74fc220ddfd6dc411a48d
SHA1 d0f82e46e869f59b6127aa7d239a392019c35e88
SHA512 e1775fca39b6f6c87d39e45c56bad3fd390beb8510a42265c226df77de008aa54eb52b070aac97d1dbb16445c797ad7d94f1a7fee17689968299e439d24ef437
MD5 SHA1 SHA512

Score

10^/10

bazarloader dropper loader

Malware Config

Signatures

Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
loader dropper bazarloader

Bazar/Team9 Loader payload 1 IoCs

resource	yara_rule
behavioral2/memory/4088-116-0x0000000002670000-0x0000000002896000-memory.dmp	BazarLoaderVar5

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\64a5774048b74fc220ddfd6dc411a48d.dll
1⤵
PID:4088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4088-116-0x0000000002670000-0x0000000002896000-memory.dmp

Download